Message ID | 20181219154020.GA4659@brain |
---|---|
State | New |
Headers | show |
Series | [Disco] LP:1764792 -- produce signatures for nvidia dkms modules | expand |
On Wed, Dec 19, 2018 at 03:40:20PM +0000, Andy Whitcroft wrote: > We are working up to producing signed Nvidia modules. We cannot ship > those assembled due to licensing but we wish for the result to be a > working .ko which is signed into the kernels kernel-module signing key. > > To do this we will build the dkms modules in a reproducible manner which > allows them to be linked on installation on the end-user system (meeting > the licensing constraints). As the build is reproducible we are able > to build, sign, and discard the modules in the primary kernel build > keeping only the signatures. These will then be consumed by a linux-lrm > package which will produce the same reproducible build pieces (unlinked) > and incorporate the associated signature. Later when installed the .kos > can be linked and that signature applied so they are loadable under > signing. > > Proposing for application to disco. Applied to disco/master-next and unstable/master, thanks!